Skip to content

Vulnerabilities of Cisco Cisco IOS XR Software

Is your version affected?

CVE Summary Score Published
CVE-2025-20138 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary… 8.8 High Mar 12, 2025
CVE-2025-20115 A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software… 8.6 High Mar 12, 2025
CVE-2025-20172 A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could… 7.7 High Feb 5, 2025
CVE-2021-1440 A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XR… 6.8 Medium Nov 18, 2024
CVE-2022-20655 A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local… 8.8 High Nov 15, 2024
CVE-2022-20846 A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an… 4.3 Medium Nov 15, 2024
CVE-2022-20845 A vulnerability in the TL1 function of Cisco Network Convergence System (NCS) 4000 Series could allow an… 6.0 Medium Nov 15, 2024
CVE-2022-20849 A vulnerability in the Broadband Network Gateway PPP over Ethernet (PPPoE) feature of Cisco IOS XR Software could… 6.1 Medium Nov 15, 2024
CVE-2024-20304 A vulnerability in the multicast traceroute version 2 (Mtrace2) feature of Cisco IOS XR Software could allow an… 8.6 High Sep 11, 2024
CVE-2024-20489 A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local… 8.4 High Sep 11, 2024
CVE-2024-20483 Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is… 7.2 High Sep 11, 2024
CVE-2024-20406 A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System (IS-IS) protocol of… 7.4 High Sep 11, 2024
CVE-2024-20381 A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is… 8.8 High Sep 11, 2024
CVE-2024-20317 A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network… 7.4 High Sep 11, 2024
CVE-2024-20398 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to obtain read/write… 8.8 High Sep 11, 2024
CVE-2024-20390 A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote… 5.3 Medium Sep 11, 2024
CVE-2024-20343 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the… 5.5 Medium Sep 11, 2024
CVE-2024-20456 A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high… 6.7 Medium Jul 10, 2024
CVE-2024-20319 A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to… 4.3 Medium Mar 13, 2024
CVE-2024-20262 A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an… 6.5 Medium Mar 13, 2024
CVE-2024-20318 A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent… 7.4 High Mar 13, 2024
CVE-2024-20315 A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS… 5.8 Medium Mar 13, 2024
CVE-2024-20322 A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco… 5.8 Medium Mar 13, 2024
CVE-2024-20266 A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated,… 5.3 Medium Mar 13, 2024
CVE-2024-20320 A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network… 7.8 High Mar 13, 2024

Other Cisco products